Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AAMAQITkF8SSOEfYfKBBP-1LhQQ.cer
File:                     AAMAQITkF8SSOEfYfKBBP-1LhQQ.cer (raw, json)
Hash identifier:          e0H/68+wsBW9QZlIroC8kLZ+EBX1yEQ8hOAN9syPf3o=
Subject key identifier:   00:03:00:40:84:E4:17:C4:92:38:47:D8:7C:A0:41:3F:ED:4B:85:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856CAC6A755639553C3DDA4276046A3290
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b1/f76c5d-7746-4ee3-96b3-460dcd6d67b9/1/AAMAQITkF8SSOEfYfKBBP-1LhQQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b1/f76c5d-7746-4ee3-96b3-460dcd6d67b9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 09:31:56 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 211011

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ac:6a:75:56:39:55:3c:3d:da:42:76:04:6a:32:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:31:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0003004084e417c4923847d87ca0413fed4b8504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:59:2e:18:02:d1:c1:12:c7:90:49:39:d2:02:
                    c9:5e:8d:75:1c:49:df:4e:b9:8a:32:bd:70:46:57:
                    40:48:f0:f1:33:7a:1f:1c:32:e7:d3:f0:7a:85:67:
                    50:6b:9d:e8:6c:ad:ca:e7:73:95:d4:75:da:ae:62:
                    9f:cb:a7:13:7a:65:9c:57:3f:a7:94:1e:3c:38:e8:
                    53:56:3d:5c:6b:28:e0:08:26:45:b9:96:79:46:19:
                    fa:75:eb:18:79:00:b1:cb:20:68:f8:f7:4a:fc:01:
                    88:d3:e4:b4:0a:28:e3:5d:44:f1:a0:0f:a9:ed:c4:
                    28:dd:1a:0b:f3:32:f0:a7:62:09:f8:92:91:4c:17:
                    bf:a8:7d:59:02:3c:05:e2:3f:78:5f:e1:f3:40:fd:
                    6b:d6:24:87:4c:5a:e7:25:f1:64:c4:1e:64:b7:f6:
                    d2:87:94:01:8b:cf:94:97:6b:6a:69:86:b0:a5:eb:
                    07:c1:04:25:87:5a:4c:4e:fc:f5:4f:17:6f:d1:76:
                    ac:78:99:01:ec:b9:e0:e9:98:d4:fe:ee:8d:23:b4:
                    41:ea:24:ed:36:1b:15:e7:75:7e:4c:7a:5a:21:31:
                    b3:ac:d0:45:44:e1:57:48:e0:ac:92:af:79:03:72:
                    f1:2c:24:9b:ab:f6:0d:02:de:f5:9d:af:f0:e1:c7:
                    a6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:03:00:40:84:E4:17:C4:92:38:47:D8:7C:A0:41:3F:ED:4B:85:04
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f76c5d-7746-4ee3-96b3-460dcd6d67b9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f76c5d-7746-4ee3-96b3-460dcd6d67b9/1/AAMAQITkF8SSOEfYfKBBP-1LhQQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211011

    Signature Algorithm: sha256WithRSAEncryption
         57:ea:46:a4:b9:9b:18:09:41:4c:81:b7:3e:ff:4d:a2:d7:3a:
         16:6a:b1:8c:ee:ff:54:e6:c3:19:fa:f6:6b:6c:b6:82:24:e9:
         96:a1:f6:84:5f:83:a3:81:c8:82:5f:3a:fa:23:0c:4e:6d:c8:
         3d:2c:72:ba:8b:62:83:77:0b:23:b6:56:5d:12:54:f5:95:83:
         9b:8f:f9:e8:91:7c:ce:61:4c:2e:df:03:80:dd:36:bc:76:b7:
         af:bb:3d:82:74:75:11:90:7c:03:24:43:1f:12:28:e1:c8:ba:
         40:8b:d0:6f:09:07:d2:64:82:29:e6:e0:67:89:85:01:97:84:
         a5:ad:2f:e8:24:e7:fc:8f:49:9c:ba:b7:ae:0d:7b:5f:b9:95:
         e6:2b:ad:43:d3:d6:4e:61:a7:23:0d:8e:e5:d3:6e:86:0b:51:
         c2:ee:7b:27:84:96:23:c2:85:54:65:e1:39:26:58:d8:d5:f4:
         72:4f:60:66:cb:fd:8a:3c:6b:fc:8b:cf:40:31:bb:55:75:73:
         43:ec:2c:e5:f5:53:8d:97:b1:03:8f:e3:37:49:cf:d5:5f:d8:
         df:d5:e6:e9:8b:1a:17:f8:1e:8f:1d:47:51:78:ee:9d:f4:ac:
         dc:1c:37:10:81:7c:7e:ec:3a:f5:03:c6:96:c3:92:70:c1:10:
         18:bc:f5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----